[Openid-specs-mobile-profile] Issue #122: Security Considerations (openid/mobile)

[Dave Tonge]

New issue 122: Security Considerations
https://bitbucket.org/openid/mobile/issues/122/security-considerations

Dave Tonge:

I've opened this issue so we can get any additional security considerations into the draft.
>From the user_code issue we have the following:

1. user_code should not stored by RP 
2. OP should provide method to change user_code 

(are these security considerations or should they go into the user_code section of the spec)